Yealink SIP-T19 E2 T4 Series, Руководство администратора

Страница: 845 / 981

Configuring Security Features
823
These tools also encrypt the plaintext 16-character symmetric keys using a fixed key, which is
the same as the one built in the IP phone, and generate new files named as <xx_Security>.enc
(xx is the name of the configuration file, for example, y000000000028_Security.enc for
y000000000028.cfg file, account_Security.enc for account.cfg). This tool generates another new
file named as Aeskey.txt to store the plaintext 16-character symmetric keys for each
configuration file.
For security reasons, administrator should upload encrypted configuration files,
<xx_Security>.enc files to the root directory of the provisioning server. During auto provisioning,
the IP phone requests to download the boot file first and then download the referenced
configuration files. For more information on boot file, refer to
Boot Files on page 99 . For
example, the IP phone downloads account.cfg file and it is encrypted. The IP phone will request
to download <account_Security>.enc file (if enabled) and decrypt it into the plaintext key (for
example, key2) using the built-in key (for example, key1). Then the IP phone decrypts
account.cfg file using key2. After decryption, the IP phone resolves configuration files and
updates configuration settings onto the IP phone system.
The following describes how to use use “Config_Encrypt_Tool.exe” to encrypt the account.cfg
file. For more information on the other two encryption tools, refer to
Yealink Configuration
Encryption Tool User Guide
.
The way the IP phone processes other configuration files is the same to that of the account.cfg
file.
Procedure to Encrypt Configuration Files
To encrypt the account.cfg file:
1. Double click “Config_Encrypt_Tool.exe” to start the application tool.
The screenshot of the main page is shown as below:
When you start the application tool, a file folder named “Encrypted” is created
automatically in the directory where the application tool is located.
2. Click
Browse
to locate configuration file(s) (for example, account.cfg) from your local
system in the
Select File(s)
field.
To select multiple configuration files, you can select the first file and then press and hold